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IN THE CLAIMS: 

1. (Currently amended) A data processing apparatus-implemented method for creating a 
privacy policy, comprising data processing apparatus-implemented steps of : 

creating a pol icy group; 

moving a data clement to the policy group; and 

generating a privacy policy based on the policy group. 

2. (Original) The method of claim 1 f wherein the data element is a predefined data element, 

3. (Original) The method of claim l f wherein the data clement comprises at least one sub- 
element 

4. (Original) The method of claim 1, further comprising: 

updating a policy-wide property; and 

generating the privacy policy based on the policy-wide property. 

5. (Original) The method of claim I, wherein the step of generating a privacy policy 
comprises generating a human-readable version of the policy. 

6. (Original) The method of claim 5, wherein the human-readable version of the policy 
comprises a hypertext markup language version of the policy. 

7. (Original) The method of claim I, wherein the step of generating a privacy policy 
comprises generating an extensible markup language version of the policy. 

8. (Original) The method of claim 1, wherein the step of generating a privacy policy 
comprises generating a compact policy. 

Page 2 of 10 
Bleizcffcr ct al. - 09/877.1 57 



PAGE 4/13 1 RCVD AT 6/7/20O4 2:01 :K PM [Eastern DayOght Time] 1 SVR:USPT0«EFXRM/2 1 DNIS:8729306 * CSfD:9723672008 * DURATION (mm-ss):03»14 



0B/07/2084 13:00 9723672008 



YEE & ASSOCIATES 



PAGE 



9. (Original) The method of claim 1, wherein the step of generating a privacy policy 
comprises generating a policy statement corresponding to the policy group. 

10. (Original) The method of claim 9, wherein the step of generating a privacy policy further 
comprises generating a table of policy elements, wherein a policy element in the table of policy 
elements corresponds to the policy statement. 

1 1 . (Original) The method of claim 1 , further comprising: 

identifying an error in the privacy policy; and 
generating an error statement describing the error. 

12. (Original) An apparatus for creating a privacy policy, comprising: 

creation means for creating a policy group; 

movement means for moving a data clement to the policy group; and 
generation means for generating a privacy policy based on the policy group. 

13. (Original) The apparatus of claim 12, wherein the data element is a predefined data 
element 

14. (Original) The apparatus of claim 12, wherein the data element comprises at least one 
sub-element 

15. (Original) The apparatus of claim 12, further comprising: 

means for updating a policy-wide property; and 

means for generating the privacy policy based on the policy-wide property. 

16. (Original) The apparatus of claim 12, wherein the generation means comprises means for 
generating a human-readable version of the policy. 
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17. (Original) The apparatus of claim 16, wherein the human-readable version of the policy 
comprises a hypertext markup language version of the policy. 

18. (Original) The apparatus of claim 19, wherein the generation means comprises means for 
generating an extensible markup language version of the policy. 

19. (Original) The apparatus of claim 12, wherein the generation means comprises means for 
generating a compact policy. 

20. (Original) The apparatus of claim 12 f wherein the generation means comprises means for 
generating a policy statement corresponding to the policy group. 

21. (Original) The apparatus of claim 20, wherein the generation means further comprises 
means for generating a table of policy elements, wherein a policy element in the table of policy 
elements corresponds to the policy statement. 

22. (Original) The apparatus of claim 12, further comprising: 

means for identifying an error in the privacy policy; and 
means for generating an error statement describing the error. 

23. (Original) An interface for creating a privacy policy, comprising: 

a first portion for displaying predefined data elements; 

a second portion for displaying groups of data elements, wherein a group of data 
elements shares at least one common property; and 

a third portion for displaying a privacy policy generated from the groups of data 

elements. 
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24. (Original) A computer program product, in a computer readable medium, for 

creating a privacy policy, comprising: 

instructions for creating a policy group; 

instructions for moving a data element to the policy group; and 

instructions for generating a privacy policy based on the policy group. 



Page 5 of 10 
Bleizeffer et al. - 09/877,157 



PAGE 7/13 * RCVD AT 6/7/2004 2:01 :38 PM [Eastern Daylight Time] 1 SVR:USPTMFXRF-1I2 1 DNIS:3729306 ' CSID:9723672008 " DURATION (mm-ss):03-14 



